meta-paper-write
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires and executes system binaries
xelatexandbibtexto compile dynamically generated LaTeX source code into PDF artifacts. This execution is managed by thepaper-artifact-runtimeskill and includes multiplepaper-latex-sanitizersteps designed to filter malicious LaTeX commands before compilation. - [EXTERNAL_DOWNLOADS]: The
search_papersstep utilizes themulti-search-engineskill to fetch academic metadata from well-known services like Crossref, Brave, and Tavily. The gathered data is used to construct the paper's bibliography through therefbibandsource_packsteps. - [PROMPT_INJECTION]: The skill processes untrusted user input (topic and paper requirements) to drive the generation of the manuscript. To mitigate indirect prompt injection risks, it consistently applies
xml_escapeandtruncatefilters to the user message before it is interpolated into LLM prompts across various steps (e.g.,paper_collect,paper_contract). - [DATA_EXPOSURE]: The skill creates and writes files to the local filesystem within a run-specific directory (
paper/{{ inputs.meta_run_id }}/). The final PDF is delivered using thepublish_artifacttool, which is restricted to the specific output path of the generated paper.
Audit Metadata